CyberArk Defender - PAM (PAM-DEF) Free Practice Test

Question 1

Which of the following logs contains information about errors related to PTA?

A. WebApplication.log

B. diamond.log

C. ITAlog.log

D. pm_error.log

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 2

A new HTML5 Gateway has been deployed in your organization.
Where do you configure the PSM to use the HTML5 Gateway?

A. Administration > Options > Privileged Session Management > Configured PSM Servers > Add PSM Gateway

B. Administration > Options > Privileged Session Management > Add Configured PSM Gateway Servers

C. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details

D. Administration > Options > Privileged Session Management > Configured PSM Servers > Connection Details > Add PSM Gateway

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 3

Match the connection component to the corresponding OS/Function.

Correct Answer:

Explanation

* A connection component is a set of parameters that defines how PSM connects to a target system using a specific protocol or application. Different connection components are suitable for different types of systems or functions. The correct matches are as follows:
* PSM-SSH: This connection component enables transparent connections to UNIX machines using the SSH protocol. It supports various UNIX flavors, such as Linux, Solaris, AIX, and HP-UX.
* PSM-RDP: This connection component enables transparent connections to Windows machines using the RDP protocol. It supports various Windows versions, such as Windows Server, Windows 10, and Windows 7.
* PSM-WinSCP: This connection component enables transparent connections to UNIX machines using the WinSCP application. It supports file transfer operations, such as upload, download, delete, and
* rename, between the local and remote machines.
* PSM-SQLPlus: This connection component enables transparent connections to Oracle databases using the SQL*Plus application. It supports various Oracle versions, such as Oracle 12c, Oracle 11g, and Oracle 10g.
* PSM-OS390: This connection component enables transparent connections to IBM mainframes using the OS/390 protocol. It supports various mainframe applications, such as TSO, CICS, and IMS.
References: Connection Components, Connection Component Parameters

Question 4

You have been asked to secure a set of shared accounts in CyberArk whose passwords will need to be used by end users. The account owner wants to be able to track who was using an account at any given moment.
Which security configuration should you recommend?

A. Configure one-time passwords for the appropriate platform in Master Policy.

B. Configure object level access control on the appropriate safe.

C. Configure shared account mode on the appropriate safe.

D. Configure both one-time passwords and exclusive access for the appropriate platform in Master Policy.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 5

For an account attached to a platform that requires Dual Control based on a Master Policy exception, how would you configure a group of users to access a password without approval.

A. On the safe in which the account is stored grant the group the' Access safe without confirmation' authorization.

B. On the safe in which the account is stored grant the group the' Access safe without audit' authorization.

C. Create an exception to the Master Policy to exclude the group from the workflow process.

D. Edith the master policy rule and modify the advanced' Access safe without approval' rule to include the group.

Correct Answer: A

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 6

When creating an onboarding rule, it will be executed upon .

A. Any future accounts discovered by a discovery process

B. Both "All accounts in the pending accounts list" and "Any future accounts discovered by a discovery process"

C. All accounts in the pending accounts list

Correct Answer: B

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 7

You need to recover an account localadmin02 for target server 10.0.123.73 stored in Safe Team1.
What do you need to recover and decrypt the object? (Choose three.)

A. Master Password

B. Server Key

C. Recovery Public Key

D. Recovery Private Key

E. Recover.exe

F. Vault data

Correct Answer: D,E,F

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 8

How much disk space do you need on a server to run a full replication with PAReplicate?

A. 1 TB

B. same as disk size on Satellite Vault

C. at least the same disk size as the Primary Vault

D. 500 GB

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 9

A new colleague created a directory mapping between the Active Directory groups and the Vault.
Where can the newly Configured directory mapping be tested?

A. Connect to the Active Directory and ensure the organizational unit exists.

B. Connect to the PrivateArk Client with the Administrator Account to see if there is a user in the Vault Admin Group.

C. Connect to Sailpoint (or similar tool) to ensure the organizational unit is correctly named; log in to the PVWA with "Administrator" and confirm authentication succeeds.

D. Search for members that exist only in the mapping group to grant them safe permissions through the PVWA.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 10

Which report provides a list of account stored in the vault.

A. Active Log

B. Privileged Accounts Compliance Status

C. Privileged Accounts Inventory

D. Entitlement Report

Correct Answer: C

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 11

Where can you check that the LDAP binding is using TCP/636?

A. in PVWA, under "LDAP Integration" => "LDAP" => "Directories" => "" => "Hosts" => "Host"

B. in Active Directory under "Users OU" => "User Properties" => "External Bindings" => "Port"

C. in PrivateArk Client, under "Tools" => "Administrative Tools" => "Directory Mapping" => ""

D. From the PVWA, connect to the domain controller using Test-NetConnection on Port 636.

Correct Answer: D

Explanation: Only visible for TestSimulate members. You can sign-up / login (it's free).

Question 12

Match the log file name with the CyberArk Component that generates the log.

Correct Answer:

Explanation

References:
* Log Files
* [Defender PAM Sample Items Study Guide], Question 46, page 16

Welcome to TestSimulate

CyberArk Defender - PAM (PAM-DEF) Free Practice Test